Safe Sites is a WordPress security plugin offering real-time monitoring, file permission control, malware scanning, and plugin & theme security.

Funlus Oy

WPLifeCycle – Free PHP Version Info & Website Manager

This plugin shows your current PHP version, its lifecycle security support days, and can send version data to the WPLifeCycle for proactive planning.

Bhumi

Track Debug

Track Debug is a WordPress debugging, performance monitoring, plugin analytics, page speed, memory usage, uptime check, security risk, WooCommerce deb …

Hidayat Mahetar

Safe Sites provides advanced security features to help keep your WordPress website safe from threats. With real-time monitoring, detailed security insights, and easy-to-use permission management, you can ensure your site is always protected.
<h4>Key Features</h4>
<ul>
<li>Two-Factor Authentication (2FA) – Secure your login with TOTP-based 2FA.</li>
<li>Smart File Permission Control – Easily manage file permissions based on your server type (Windows/Linux).</li>
<li>Visual File Permissions Map – See a color-coded structure of your site’s file security.</li>
<li>Malware Scanner – Analyze your domain, URLs, and HTML security headers for vulnerabilities via VirusTotal.</li>
<li>Security Dashboard – View a complete overview of your site’s security health.</li>
<li>Plugin & Theme Security – Detect vulnerabilities in plugins and themes and receive alerts.</li>
<li>Login & User Security – Monitor login attempts and manage user sessions.</li>
<li>Site Hardening – Apply recommended security tweaks to your WordPress installation.</li>
<li>Code Signing – Verify the integrity of your plugin files.</li>
</ul>
<h3>Detailed Features</h3>
General Security & Server Health:
<ul>
<li>SSL Status – Check if SSL is active for secure connections.</li>
<li>Site Health & Server Info – Displays PHP version, database version, and server details.</li>
<li>Panic Mode – Quickly lock down your site in case of an emergency.</li>
</ul>
Access & User Security:
<ul>
<li>Two-Factor Authentication (2FA):
<ul>
<li>TOTP Support – Use Google Authenticator, Authy, or any TOTP app.</li>
<li>Configurable for All Roles – Require 2FA for specific user roles.</li>
<li>Backup Codes – Generate backup codes for emergency access.</li>
</ul>
</li>
<li>Login Monitoring – Track failed login attempts and monitor user activity.</li>
</ul>
Security Monitoring & Protection:
<ul>
<li>File Permissions Management:
<ul>
<li>Windows Servers – Show file read/write permissions.</li>
<li>Linux Servers – Display numeric file permissions along with current and recommended settings.</li>
<li>Fix Permissions – Select files and fix incorrect permissions directly.</li>
</ul>
</li>
<li>Visual File Permission Map – Interactive file structure with security indicators.</li>
<li>Hardening – One-click security hardening for common WP vulnerabilities.</li>
<li>Code Signing – Ensure plugin files haven’t been tampered with.</li>
</ul>
Malware & Security Scanner:
<ul>
<li>Domain & URL Analysis – Scan domain and URLs for malware using VirusTotal API.</li>
<li>Security Header & DNS Scan – Check security headers and DNS settings.</li>
<li>Alert System – Receive alerts for detected threats.</li>
</ul>
WordPress Management & Security:
<ul>
<li>Plugin & Theme Security:
<ul>
<li>Vulnerability Scanner – Check for known security flaws.</li>
<li>Inactive Plugin Alerts – Warns about inactive components that pose risks.</li>
</ul>
</li>
<li>Security Dashboard – A centralized panel for all security settings.</li>
</ul>
<h3>External Services Used</h3>
Safe Sites relies on the following third-party services for security analysis and malware detection. Below is a detailed breakdown of what each service does, what data is sent, and where you can review their policies:
<h3>1. VirusTotal API</h3>
Purpose: Used to scan domain, URLs, and file hashes for malware detection and security threats.
What data is sent & when? 
– When a user initiates a manual malware or URL scan, the plugin sends the target URL or domain to VirusTotal for analysis. 
– No user private data is sent—only the target URLs/domains or hash values of files are transmitted.
Terms of Service & Privacy Policy: 
– <a href="https://www.virustotal.com/terms-of-service" rel="nofollow ugc">VirusTotal Terms of Service</a> 
– <a href="https://www.virustotal.com/privacy-policy" rel="nofollow ugc">VirusTotal Privacy Policy</a>

Safe Sites

Safe Sites is a lightweight and powerful plugin. Easy to use, with smart file permission controls and real-time security insights. Highly recommended for keeping your WordPress site secure!

Alternatives to Safe Sites

Top alternatives